This Consumer Health Data Privacy Policy explains how Green House LLC d/b/a Wyphi ("Wyphi") collects, uses, shares, and protects consumer health data and similar sensitive wellness information.
It supplements the general Wyphi Privacy Policy and is intended to provide the disclosures and rights required by applicable U.S. consumer-health-data laws.
Depending on how you use Wyphi, consumer health data may include:
Wyphi does not intentionally use this information to diagnose a medical or mental-health condition.
We obtain consumer health data:
1. directly from you when you choose a feeling, enter an optional note, select session options, use a meditation, or provide post-session feedback; and
2. through limited inferences Wyphi creates from those inputs to build the meditation session you requested.
Wyphi does not currently purchase consumer health data from data brokers.
We use consumer health data to:
We do not use consumer health data for targeted advertising.
If you type an optional personalization note, the raw text exists temporarily in the active application/browser session and during the session-building request.
The raw text may be sent through the Lovable AI Gateway together with your selected feeling, session duration, and guidance level to interpret the session request.
The gateway is currently configured to request a Google Gemini-family model.
The application does not intentionally include your email address, Wyphi user ID, session ID, visitor ID, password, or authentication token in that AI prompt.
After successful session creation:
Structured information derived to create and maintain the requested session may be stored with that session.
To operate the requested Service, the following categories may be disclosed:
When you submit a free-text note, the note together with selected feeling, duration, and guidance level is processed through the Lovable AI Gateway for session interpretation.
Session choices, derived personalization fields, session history, and related application records are processed using Lovable / Lovable Cloud infrastructure needed to host, store, secure, and operate Wyphi.
If you include consumer health information in an email to Wyphi, our email infrastructure will necessarily process that message.
Consumer health data may be processed by the following categories and services where relevant:
Application runtime, hosting, database, private storage, authentication and supporting infrastructure.
Used when you submit an optional free-text note for session interpretation. The gateway is currently configured to request a Google Gemini-family model.
Only to the extent you voluntarily include consumer health information in a support or privacy email.
Wyphi does not intentionally provide raw meditation notes, derived wellness categories, or post-session wellness feedback to Stripe, advertising platforms, data brokers, Google/Apple OAuth, or advertising analytics platforms as part of their normal integrations.
Wyphi does not sell consumer health data.
Wyphi does not share consumer health data for targeted advertising.
Wyphi does not condition access to the Service on authorization to sell consumer health data.
If this practice ever materially changes, Wyphi will update this Policy and obtain any separate authorization required by applicable law before the change takes effect.
Wyphi does not permit advertising networks to collect consumer health data through the Service over time and across unaffiliated websites for targeted advertising.
Ordinary infrastructure, authentication, payment, font, and network providers may process technical request information necessary to provide their respective services, as described in the general Privacy Policy.
Wyphi processes consumer health data when you request meditation and wellness features and as otherwise permitted by applicable law.
Where applicable law requires separate affirmative consent for a collection or sharing activity, Wyphi will request that consent before the activity occurs.
Where applicable, you may withdraw consent to future collection or sharing by contacting privacy@wyphi.com.
Withdrawal does not affect processing that occurred lawfully before withdrawal.
Raw free-text intention prose is transient and is not retained in the saved session database after the requested session is successfully created.
Derived personalization information, session configuration, session history, progress, and fixed-choice feedback may remain associated with your account so Wyphi can provide session-history, replay, personalization, and related functions.
Unlinked anonymous sessions are generally deleted after 180 days.
When you delete your account or submit an applicable consumer-health-data deletion request, Wyphi deletes or de-identifies consumer health data as required by applicable law, subject to limited legally permitted retention and provider backup cycles.
Where Washington law applies to archived or backup consumer health data, deletion may be delayed as permitted by law while archived or backup systems are restored, but not beyond the applicable statutory period.
Depending on applicable law, you may have the right to:
To exercise these rights, email:
You do not need to create a new account solely to submit a privacy request.
We may use your existing account or request reasonable information to authenticate your identity.
Where Washington law applies, Wyphi will respond to authenticated requests without undue delay and generally within 45 days, subject to extensions permitted by law.
Requests are provided without charge to the extent required by applicable law.
When applicable law requires it, Wyphi will:
Payment records maintained independently by Stripe are not consumer meditation records and may remain subject to Stripe's legal and financial retention obligations.
If Wyphi denies a consumer-health-data request and applicable law provides an appeal right, you may appeal by replying to the decision or emailing:
Use the subject:
Privacy Appeal
We will respond within the period required by applicable law.
If an appeal is denied, we will provide information about contacting the appropriate state regulator or attorney general where required.
Wyphi restricts access to consumer health data and uses administrative, technical, and organizational safeguards appropriate to the sensitivity of the information.
These include data minimization, server-side access controls, private storage, sanitized reliability logging, and account-level authorization.
No online system can be guaranteed completely secure.
If Wyphi proposes to collect, use, or share additional categories of consumer health data, or use existing consumer health data for a materially different purpose, we will update this Policy and obtain affirmative consent where required before the new collection, use, or sharing begins.
We will provide notice of other material changes through an appropriate customer-facing method and update the effective date.
Operator: Green House LLC d/b/a Wyphi
Privacy requests and appeals: privacy@wyphi.com
General support: support@wyphi.com